Vulnerabilities > Harfbuzz Project > Harfbuzz > 6.0.0

DATE CVE VULNERABILITY TITLE RISK
2023-02-04 CVE-2023-25193 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.
network
low complexity
harfbuzz-project fedoraproject CWE-770
7.5